This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft File: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json) Hash identifier: pbc4XNqbQ81xg1Acv5SozUpJ2vAGDTcQ9DMnAbMS768= Subject key identifier: 3F:A7:08:B4:DA:3F:74:45:E5:A9:E9:7D:CB:7B:70:60:65:E9:36:19 Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69 Certificate issuer: /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69 Certificate serial: 019B3C7F41A243297E25A5335C50215C0804 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft Manifest number: 1785 Signing time: Sat 20 Dec 2025 16:02:11 +0000 Manifest this update: Sat 20 Dec 2025 16:02:11 +0000 Manifest next update: Sun 21 Dec 2025 16:02:11 +0000 Files and hashes: 1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: g/CwF7Ym1SyLIDpi5beao7wbdclXV3Be3U0c8vwXTbs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3c:7f:41:a2:43:29:7e:25:a5:33:5c:50:21:5c:08:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69 Validity Not Before: Dec 20 16:02:11 2025 GMT Not After : Dec 21 16:02:11 2025 GMT Subject: CN=3fa708b4da3f7445e5a9e97dcb7b706065e93619 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:eb:d2:13:a0:22:52:80:af:3e:77:1f:88:e1: 02:27:1c:dc:3a:3e:7d:f4:16:39:d5:18:70:d3:dd: 2a:15:d0:a7:75:12:5f:f5:0a:0c:47:63:94:42:11: 51:18:a1:5a:c3:6f:4e:ae:5a:cc:68:16:0c:fa:15: a2:9f:a5:e8:ba:84:23:0a:bf:79:1d:61:82:85:5d: 85:d1:93:8b:ce:61:5c:60:0d:23:36:95:90:97:da: f9:ab:2e:a3:f9:28:36:88:45:d5:46:6a:69:1d:53: 51:4f:a2:92:85:97:60:f5:ed:84:2e:9e:04:b0:a7: 53:f9:4d:b3:1a:62:be:31:9d:3b:0a:1a:54:68:a7: 59:78:4d:1b:b7:a2:2d:83:17:2a:48:74:a2:54:98: ae:78:92:9d:c7:25:be:ed:13:9d:41:d6:6b:43:be: 28:67:9b:84:30:a5:05:db:17:e9:d7:65:73:4e:8a: 26:1d:9d:db:a8:e8:18:5f:1e:71:fa:b5:f4:0d:1f: 1d:1b:85:d2:b7:28:0d:51:73:fd:33:00:43:c7:97: 80:2b:38:86:5a:dd:19:0b:e2:62:fb:0d:3f:cf:c3: c8:9c:87:79:73:e2:bb:52:e5:40:7c:bc:04:e9:9d: 3f:4f:c6:ea:ca:68:29:1a:22:88:35:a7:11:17:24: c6:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A7:08:B4:DA:3F:74:45:E5:A9:E9:7D:CB:7B:70:60:65:E9:36:19 X509v3 Authority Key Identifier: keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:62:d4:77:7a:62:47:2d:a7:25:c5:82:d3:6b:f1:b1:39:26: c8:37:0f:7a:3b:db:50:64:ae:9e:3f:06:db:02:b3:1c:ad:0e: 7e:1c:74:7c:00:00:a2:11:de:62:58:29:4d:21:8e:5b:bc:f5: 4b:57:a1:65:8b:e6:15:ee:93:c4:ae:fc:a5:3f:46:49:d5:88: 76:21:47:72:ee:94:47:12:d9:c7:d8:d6:bd:d5:b5:a7:99:96: 4d:2d:cc:15:7b:6d:98:c3:f1:91:a6:8f:3c:1c:81:c3:89:50: 8f:6e:c2:66:67:cd:df:3a:eb:62:c9:b0:6c:98:34:93:a1:14: ce:ff:f8:91:50:a9:ad:db:10:2a:6c:04:ab:4f:02:ea:9f:a8: 7f:25:de:05:f6:a3:c2:b8:91:1c:cf:6d:46:55:16:24:e1:f7: 31:c7:a8:8e:fb:3d:6b:ca:8f:6b:f2:b5:40:5f:47:ea:ca:ee: d2:cb:39:31:4c:7c:84:2c:98:e0:4d:28:ff:3e:2a:dc:c3:a4: c4:70:d9:ff:cb:d4:92:fc:d0:d3:73:0f:81:48:4b:a6:29:43: cf:bb:85:e3:ac:bb:48:45:9d:d4:95:16:c6:61:0b:aa:5f:39: 8f:30:eb:b5:fe:69:6b:5c:62:a9:12:36:1b:81:ec:a9:71:6a: c2:ad:e6:1a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs8f0GiQyl+JaUzXFAhXAgEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUyYTRkMTQ1ZWU4OWIyN2IxNTUzZDU1MWMyMGExNWJjNmJi ZjZkNjkwHhcNMjUxMjIwMTYwMjExWhcNMjUxMjIxMTYwMjExWjAzMTEwLwYDVQQD EygzZmE3MDhiNGRhM2Y3NDQ1ZTVhOWU5N2RjYjdiNzA2MDY1ZTkzNjE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+vSE6AiUoCvPncfiOECJxzcOj59 9BY51Rhw090qFdCndRJf9QoMR2OUQhFRGKFaw29OrlrMaBYM+hWin6XouoQjCr95 HWGChV2F0ZOLzmFcYA0jNpWQl9r5qy6j+Sg2iEXVRmppHVNRT6KShZdg9e2ELp4E sKdT+U2zGmK+MZ07ChpUaKdZeE0bt6ItgxcqSHSiVJiueJKdxyW+7ROdQdZrQ74o Z5uEMKUF2xfp12VzToomHZ3bqOgYXx5x+rX0DR8dG4XStygNUXP9MwBDx5eAKziG Wt0ZC+Ji+w0/z8PInId5c+K7UuVAfLwE6Z0/T8bqymgpGiKINacRFyTGvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD+nCLTaP3RF5anpfct7cGBl6TYZMB8GA1UdIwQY MBaAFOKk0UXuibJ7FVPVUcIKFbxrv21pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZjY0MWItZTJhNS00YzFhLWJmMjEt YzNiOWYyMDEzMzJlLzEvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNi9iZjY0MWItZTJhNS00YzFhLWJmMjEtYzNiOWYyMDEzMzJl LzEvNHFUUlJlNkpzbnNWVTlWUndnb1Z2R3VfYldrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmLUd3pi Ry2nJcWC02vxsTkmyDcPejvbUGSunj8G2wKzHK0Ofhx0fAAAohHeYlgpTSGOW7z1 S1ehZYvmFe6TxK78pT9GSdWIdiFHcu6URxLZx9jWvdW1p5mWTS3MFXttmMPxkaaP PByBw4lQj27CZmfN3zrrYsmwbJg0k6EUzv/4kVCprdsQKmwEq08C6p+ofyXeBfaj wriRHM9tRlUWJOH3Mceojvs9a8qPa/K1QF9H6sru0ss5MUx8hCyY4E0o/z4q3MOk xHDZ/8vUkvzQ03MPgUhLpilDz7uF46y7SEWd1JUWxmELql85jzDrtf5pa1xiqRI2 G4HsqXFqwq3mGg== -----END CERTIFICATE-----Generated at Sat Dec 20 20:45:26 2025 by rpki-client